Skip to content

chore: update pydantic-ai-slim[logfire] requirement from >=2.27.1 to >=2.30.0 - #325

Merged
amrit110 merged 1 commit into
mainfrom
dependabot/uv/pydantic-ai-slim-logfire--gte-2.30.0
Aug 18, 2026
Merged

chore: update pydantic-ai-slim[logfire] requirement from >=2.27.1 to >=2.30.0#325
amrit110 merged 1 commit into
mainfrom
dependabot/uv/pydantic-ai-slim-logfire--gte-2.30.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on pydantic-ai-slim[logfire] to permit the latest version.

Release notes

Sourced from pydantic-ai-slim[logfire]'s releases.

v2.30.0 (2026-08-13)

What's Changed

🛡️ Security

  • GHSA-q2xc-rrxj-58x9: the local dev web chat UI (Agent.to_web(), clai web) didn't validate the Host header, so DNS rebinding from a website you visit could reach it and run the served agent with your local process's tools and credentials. Fixed in pydantic-ai/pydantic-ai-slim 2.30.0 by validating Host against localhost/loopback/LAN addresses by default; deployments reached under a real hostname must opt in with the new allowed_hosts setting.

🚀 Features

🐛 Bug Fixes

Full Changelog: pydantic/pydantic-ai@v2.29.0...v2.30.0

Changelog

Sourced from pydantic-ai-slim[logfire]'s changelog.

Upgrade Guide

In September 2025, Pydantic AI reached V1 and committed to API stability: no changes that break your code until V2. V2 is now available, collecting the breaking and behavior changes that stability guarantee didn't allow. This guide is the canonical place to learn what's in V2, how to install it, and how to upgrade; for the guarantees behind these version numbers, see the Version Policy.

Breaking Changes

Here's a filtered list of the breaking changes for each version to help you upgrade Pydantic AI.

v2.0.0 (2026-06-23)

The stable V2.0 release. There are no new breaking or behavior changes since the betas; the full breaking-change list and recommended upgrade path are in the v2.0.0b1 entry below. Install it with:

uv add pydantic-ai

v2.0.0b7 (2026-06-10)

The seventh V2 beta, forked from v1.107.0. There are no new V2 breaking or behavior changes since v2.0.0b6 below — everything in that entry applies unchanged — but this beta picks up the latest V1 release on top, which adds Claude Fable 5 / Mythos 5 model support and OpenRouter prompt caching (CachePoint), plus known_model_names() and Anthropic fixes; see the v1.107.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b7"

For the full breaking-change list and the recommended upgrade path, see the v2.0.0b1 entry below; the only difference is that the latest V1 to upgrade through first is now v1.107.0.

v2.0.0b6 (2026-06-04)

The sixth V2 beta, forked from v1.106.0. There are no new V2 breaking or behavior changes since v2.0.0b5 below — everything in that entry applies unchanged — but this beta picks up the latest V1 release on top, which adds api_host/timeout configuration and base seed mapping for the xAI provider, plus streaming and data-URI handling fixes; see the v1.106.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b6"

For the full breaking-change list and the recommended upgrade path, see the v2.0.0b1 entry below; the only difference is that the latest V1 to upgrade through first is now v1.106.0.

v2.0.0b5 (2026-06-02)

The fifth V2 beta, forked from v1.105.0. There are no new V2 breaking or behavior changes since v2.0.0b4 below — everything in that entry (including the prepare-callbacks change) still applies — but this beta picks up the latest V1 release on top, which adds on-demand (deferred-loading) capabilities and Grok 4.3 reasoning_effort support, plus GoogleModelSettings.google_cached_content and Temporal gateway/ fixes; see the v1.105.0 release notes for the full list.

Install it the same way, pinning the exact pre-release version:

pip/uv-add "pydantic-ai==2.0.0b5"

... (truncated)

Commits
  • c24a900 Set TEMPORAL_DEBUG and disable Prefect's task-run recorder to stop durable-...
  • 59284fc Correct the ModelSettings Supported by: lists and pin them with a wire-pr...
  • fba3ef6 Derive the compaction trim's behavior from a declared compaction_mode (#7440)
  • 00db3a4 Anchor the tool-callability evidence window to the response's serving provide...
  • 871c7ae Add allowed_hosts to Agent.to_web() and clai web (#7437)
  • da29bfa Require a deferred tool to be revealed, and its capability loaded, before it ...
  • 1e8f040 Expose gRPC metadata on XaiProvider (#7423)
  • e823795 Add gemini-3.7-flash model (#7445)
  • 39acfbd Update LatestCerebrasModelNames to current model catalog (#6838)
  • 7f09604 Lowercase model name before profile lookup in SambaNova, Heroku, and Firework...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 17, 2026
Updates the requirements on [pydantic-ai-slim[logfire]](https://github.com/pydantic/pydantic-ai) to permit the latest version.
- [Release notes](https://github.com/pydantic/pydantic-ai/releases)
- [Changelog](https://github.com/pydantic/pydantic-ai/blob/main/docs/changelog.md)
- [Commits](pydantic/pydantic-ai@v2.27.1...v2.30.0)

---
updated-dependencies:
- dependency-name: pydantic-ai-slim[logfire]
  dependency-version: 2.30.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@amrit110
amrit110 force-pushed the dependabot/uv/pydantic-ai-slim-logfire--gte-2.30.0 branch from ec68339 to 6bbd360 Compare August 18, 2026 00:21
@amrit110
amrit110 merged commit 0979a6c into main Aug 18, 2026
7 checks passed
@amrit110
amrit110 deleted the dependabot/uv/pydantic-ai-slim-logfire--gte-2.30.0 branch August 18, 2026 00:24
@amrit110

Copy link
Copy Markdown
Member

Automated fix applied and PR merged

The agentic fix loop successfully fixed this PR and merged it.

✓ Successfully fixed merge_only failures - Modified 0 files - Executed 74 agent actions - (39 info, 16 tool_call, 7 error, 9 tool_result, 3 reasoning)

View detailed trace on dashboard | Raw trace

AI Engineering Maintenance Bot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant